Fedora 19 : samba-4.0.8-1.fc19 (2013-14312)

Update to 4.0.8 CVE-2013-4124. Fix location of the Kerberos credentials cache. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

FreeBSD : samba -- denial of service vulnerability (e21c7c7a-0116-11e3-9e83-3c970e169bc2)

The Samba project reports : All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file...

[SECURITY] Fedora 19 Update: samba-4.0.8-1.fc19

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

Samba 3.x < 3.5.22 / 3.6.x < 3.6.17 / 4.0.x < 4.0.8 read_nttrans_ea_lis DoS

According to its banner, the version of Samba running on the remote host is 3.x prior to 3.5.22, 3.6.x prior to 3.6.17 or 4.0.x prior to 4.0.8. It is, therefore, potentially affected by a denial of service vulnerability. An integer overflow error exists in the function 'readnttransealis' in the...

Mandriva Linux Security Advisory : samba (MDVSA-2013:207)

A vulnerability has been found and corrected in samba : Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

Security fix for the ALT Linux 10 package samba version 4.0.8-alt1

Aug. 7, 2013 Alexey Shabalin 4.0.8-alt1 - 4.0.8 - fixed CVE-2013-4124...

Security fix for the ALT Linux 8 package samba-DC version 4.0.8-alt1

Aug. 7, 2013 Alexey Shabalin 4.0.8-alt1 - 4.0.8 - fixed CVE-2013-4124...

Samba < 3.5.22 / 3.6.17 / 4.0.8 Denial of Service Vulnerability

Binary data 6965.prm...

Security fix for the ALT Linux 8 package samba version 4.0.8-alt1

Aug. 7, 2013 Alexey Shabalin 4.0.8-alt1 - 4.0.8 - fixed CVE-2013-4124...

Slackware 13.1 / 13.37 / 14.0 / current : samba (SSA:2013-218-03)

New samba packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-218-03. The text itself is...

[slackware-security] samba

New samba packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/samba-3.6.17-i486-1slack14.0.txz: Upgraded. This update fixes missing integer wrap protection in an EA list reading that...

Integer overflow

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

CVE-2013-4124

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

DEBIAN-CVE-2013-4124

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

CVE-2013-4124

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

CVE-2013-4124

CVE-2013-4124 (Samba) is an integer overflow in read_nttrans_ea_list (nttrans.c) that can be triggered by a malformed EA list, potentially leading to memory consumption DoS. Affected are Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8. The initial entry specifies the vulnerabil...

CVE-2013-4124

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

CVE-2013-4124

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

CVE-2013-4124

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

samba -- denial of service vulnerability

The Samba project reports: All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file...